Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/75RFfk-11ZqaVCCkOzYjo2ohZbU.roa
File:                     75RFfk-11ZqaVCCkOzYjo2ohZbU.roa (raw, json)
Hash identifier:          I7KEIAozpvnNrpGbbspTKRN0GTTG3eNf5BbRrBuWV5E=
Subject key identifier:   EF:94:45:7E:4F:B5:D5:9A:9A:54:20:A4:3B:36:23:A3:6A:21:65:B5
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       48718B7B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/75RFfk-11ZqaVCCkOzYjo2ohZbU.roa
Signing time:             Sat 01 Jan 2022 03:00:33 +0000
ROA not before:           Sat 01 Jan 2022 03:00:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59504
IP address blocks:        46.161.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215400827 (0x48718b7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  1 03:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef94457e4fb5d59a9a5420a43b3623a36a2165b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:94:cb:3a:76:7f:4c:f6:e8:60:90:65:5e:
                    86:ff:8b:3c:46:6b:84:33:82:72:e0:64:0d:8a:48:
                    e2:22:f5:3a:61:d2:69:c2:46:63:be:79:ab:eb:a2:
                    86:24:d1:0b:26:18:65:91:be:0b:59:4d:df:71:aa:
                    dd:dd:1e:7a:3a:8e:bf:3c:4a:dd:52:b4:8e:4d:4c:
                    0f:c0:1f:94:86:2d:2f:f7:c2:d1:a1:07:90:c8:b1:
                    9f:9f:6a:00:1a:43:dc:9d:07:98:10:94:9b:91:07:
                    9b:21:51:a7:8a:d7:8e:7e:e8:12:3f:3e:70:97:13:
                    d8:c4:a1:bf:69:fd:95:64:15:45:54:69:a6:b1:a2:
                    ae:e7:9b:d1:1d:e0:ae:23:c6:1c:35:9b:63:25:e3:
                    9e:88:e7:08:59:8e:08:ed:21:bd:c9:a0:48:6a:ec:
                    89:51:67:6a:13:44:b7:79:8b:69:04:30:43:97:c6:
                    4d:6c:b1:44:34:c2:63:85:84:ae:da:3b:6d:5a:8b:
                    3b:4c:35:00:da:79:a2:28:c2:e6:f3:86:d8:a4:78:
                    bc:b9:b3:96:ed:f9:00:35:27:99:f6:41:cd:e6:aa:
                    2e:73:1e:76:56:35:69:2b:3b:76:72:2c:c8:66:61:
                    48:3e:a9:71:21:ce:9c:91:cf:36:b0:ab:d7:48:c2:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:45:7E:4F:B5:D5:9A:9A:54:20:A4:3B:36:23:A3:6A:21:65:B5
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/75RFfk-11ZqaVCCkOzYjo2ohZbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.161.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:9e:cd:70:e7:7c:5d:86:71:e1:45:3a:91:e4:93:1c:80:
         1b:fc:0c:09:95:cd:8e:ec:69:36:41:ab:9f:dc:0d:50:0f:3a:
         7c:90:5f:8b:20:00:56:92:7e:55:0d:87:9f:3d:c3:77:78:8c:
         4f:29:10:f7:d3:95:0e:7f:bd:02:26:d2:1c:a1:57:d0:74:0f:
         7d:91:74:99:ff:51:5e:36:dc:c5:bf:57:48:90:eb:a8:60:f2:
         fd:2d:45:42:7e:67:b5:64:64:ed:ae:33:f0:2c:37:2b:29:01:
         6f:1c:8f:a6:7e:71:ee:62:7b:6f:4e:6a:ef:d8:39:ea:d2:21:
         ee:25:9d:6e:56:f2:0a:4e:63:19:a6:9f:97:82:1b:95:61:f9:
         99:f0:f1:7e:2f:93:1c:2f:22:a9:9a:b4:b1:63:ab:6a:89:41:
         8b:f0:90:50:49:5e:2c:b6:df:ea:11:eb:05:4a:9f:b6:ae:19:
         8d:c1:6f:17:4c:b5:fb:cb:fd:46:d0:9e:76:6c:0c:9a:5f:4a:
         1f:b8:2e:bb:c6:e2:f7:94:5e:a5:eb:dd:71:f3:1e:28:33:c1:
         2d:13:2c:b6:f7:a6:ec:fc:e4:6c:71:a5:1f:ba:e7:66:0b:12:
         e1:1b:96:7c:a9:26:a1:a8:4b:aa:11:4c:ca:c2:e9:51:75:1d:
         cc:f2:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org